Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0053835458D111EF95470A4EC4F9AE02.roa
File: 0053835458D111EF95470A4EC4F9AE02.roa (raw, json)
Hash identifier: 5oHE40oQRiX6OPNYYUShtqbsX8GkG/yZg+wDShLnynA=
Subject key identifier: 4B:D6:E8:54:D3:0D:FD:46:15:7E:0A:18:04:1B:05:D3:4F:F8:01:AA
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0A72
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0053835458D111EF95470A4EC4F9AE02.roa
Signing time: Tue 13 Aug 2024 12:10:09 +0000
ROA not before: Tue 13 Aug 2024 12:10:09 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.129.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 19
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2674 (0xa72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD
Validity
Not Before: Aug 13 12:10:09 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bb4d20-3dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:9f:3c:8f:81:87:ce:02:45:93:7c:ad:60:
fd:bb:de:ba:f8:ab:b0:26:9b:e0:89:45:4e:e0:6f:
65:3e:92:9f:29:84:e5:8f:0c:f9:c0:78:50:82:89:
7a:60:45:a8:2f:9f:2d:7f:07:94:ae:d7:88:a3:f4:
95:96:e1:5c:0a:c1:42:93:af:25:50:21:19:73:df:
82:13:dd:1f:82:ea:ad:4e:c8:10:ed:ac:b5:62:4e:
f5:07:a8:a7:10:13:b5:71:20:3b:71:1f:14:f6:86:
3a:28:1b:0c:f4:50:c4:d0:a6:a7:b6:8d:61:69:d8:
45:0a:0c:15:31:c8:f2:e5:7d:ac:77:bf:2b:6a:62:
4e:90:99:01:e4:5d:90:da:e4:d4:83:30:7a:85:2d:
db:62:f4:b4:2a:11:e2:cf:6a:aa:cc:36:a9:2c:f7:
dc:0f:3b:2a:0e:78:0b:7a:1e:74:2b:5e:23:f9:39:
0a:4f:d9:23:7e:21:f1:15:f7:7f:fd:f5:bc:2d:07:
b3:50:16:24:70:0d:59:f0:dd:5c:c9:e3:6d:fe:65:
e7:b7:ef:f7:86:a7:8a:77:2c:d6:9a:75:e8:0b:1f:
00:e6:c7:61:2e:64:f5:4e:2a:d8:7a:95:45:0d:13:
cb:eb:27:28:f9:80:6f:01:17:e3:98:52:1a:25:72:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D6:E8:54:D3:0D:FD:46:15:7E:0A:18:04:1B:05:D3:4F:F8:01:AA
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0053835458D111EF95470A4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.129.0/24
14.192.131.0-14.192.133.255
14.192.135.0-14.192.139.255
14.192.145.0-14.192.147.255
14.192.149.0-14.192.150.255
14.192.155.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
6c:06:58:07:6f:3b:d0:29:4d:47:eb:c0:ab:a4:da:f3:e6:32:
b9:bb:6a:27:58:1a:3a:fb:01:d5:fb:fb:26:fa:ae:0d:62:ee:
54:14:34:7d:be:41:06:5e:f7:d2:eb:52:d0:06:01:1c:1f:e2:
ee:19:2c:e6:26:ed:30:42:bc:a4:b1:75:2a:e9:a6:88:4a:25:
56:4e:50:ad:41:33:fe:1a:2c:04:d6:04:cc:fd:b6:2e:88:01:
06:30:54:83:88:57:c4:77:c3:ed:b6:19:c4:a9:a7:b5:65:e1:
59:1e:e8:0e:d3:b5:6c:00:1b:f2:cd:fd:9c:a4:2c:10:6c:e1:
76:a9:87:bc:4a:98:25:b2:8c:e8:6e:70:e8:08:4b:71:de:5f:
dd:5b:3b:3e:4d:99:c1:46:6b:59:1b:71:bb:1a:32:a2:b7:25:
16:09:39:72:7a:a3:22:83:db:38:e3:1a:bc:49:87:43:36:6f:
23:e2:aa:8f:c7:14:13:32:1b:d4:3a:50:7c:56:76:70:1e:3a:
53:b0:a8:75:25:ba:4f:6b:b2:a2:38:20:7a:c8:35:28:fa:6f:
52:a4:6e:04:55:e4:15:a9:b6:7f:00:fb:02:d6:b9:cf:33:c0:
cf:37:d2:d8:a0:03:b8:a0:d5:6f:00:5f:a9:54:2f:a5:5d:2e:
2a:06:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:15 2025 by rpki-client